cheat-shoot
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to automate project workflows, including directory creation and calculating text differences via standard utilities like
diff,grep, andwc. These operations are strictly limited to local project paths such asscripts/andvideos/. - [DATA_EXPOSURE]: Maintains a local JSON file (
.cheat-state.json) to track shooting status and buffer metrics. This data is handled locally within the agent's project environment. - [PROMPT_INJECTION]: Ingests user-provided shooting scripts which are stored in the file system. While this creates an indirect injection surface for subsequent processing, the skill itself performs no execution of this content.
- Ingestion points: User-provided text for 'actual shooting scripts' and existing files in the
scripts/directory. - Boundary markers: Not present; the script content is written directly to the file system without delimiters.
- Capability inventory: The skill has access to
Bash(*),Write,Edit, andGlobtools. - Sanitization: No sanitization is performed on the content of the script files.
Audit Metadata